QMSR vs. ISO 13485: What Changed and What Your Startup Needs Before Submitting to FDA

The Quality System Landscape Just Changed -- Is Your Startup Ready?

On February 2, 2026, FDA's Quality Management System Regulation (QMSR) officially took effect, replacing the legacy Quality System Regulation (QSR) codified under 21 CFR Part 820. For medical device startups navigating their first 510(k), De Novo, or PMA submission, this is not a minor administrative update. It is a foundational shift in how FDA expects you to design, document, and demonstrate your quality system -- and the clock is already running.

This post breaks down the critical differences between QMSR and ISO 13485:2016, what the harmonization actually means in practice, and the specific quality infrastructure your startup must have in place before submitting to FDA.

What Is QMSR and Why Did FDA Make the Change?

The final QMSR rule, published in the Federal Register on February 2, 2024 and effective February 2, 2026, explicitly harmonizes 21 CFR Part 820 with ISO 13485:2016. FDA's stated goal was to reduce redundant compliance burdens for manufacturers already certified to ISO 13485 and to align U.S. requirements with internationally accepted quality standards.

The old Part 820 QSR had not been substantively updated since 1996. QMSR modernizes the framework by incorporating ISO 13485:2016 by reference, meaning that satisfying ISO 13485 requirements is now the baseline for satisfying FDA's QMS expectations -- with a few critical U.S.-specific additions.

Key Differences Between QMSR and ISO 13485: What Actually Changed

While QMSR adopts ISO 13485:2016 as its structural backbone, there are meaningful distinctions startup founders and regulatory professionals must understand:

• Complaint Handling and MDR Integration: QMSR retains specific U.S. requirements for complaint files and Medical Device Reporting (MDR) under 21 CFR Part 803. ISO 13485 addresses feedback and complaint handling generically; QMSR requires explicit linkage to FDA's MDR obligations. Your QMS procedures must reflect this distinction.
• Records and Documentation Language: QMSR adopts ISO 13485's terminology -- 'documented information' replaces the QSR's 'records' and 'documents' distinction. This is more than semantic. Your document control SOPs and design history files need to reflect this updated framework.
• Design Controls Remain Non-Negotiable: QMSR Section 820.30 (now restructured under the ISO 13485 design and development clause 7.3) still requires robust design controls. For startups, this means your Design History File (DHF), Device Master Record (DMR), and Design Validation records must be complete and submission-ready before FDA review begins.
• Supplier Controls: ISO 13485 Section 7.4 and QMSR align on supplier evaluation and monitoring, but FDA inspectors will still scrutinize whether your Critical Component suppliers have been formally qualified. A spreadsheet of vendor names does not satisfy this requirement.
• U.S.-Specific Provisions Remain: Certain QSR provisions -- including corrective and preventive action (CAPA) procedural requirements, management responsibility structures, and statistical techniques -- are preserved under QMSR with explicit regulatory force, not merely as ISO guidance suggestions.

What Your Startup Must Have in Place Before Submitting

A common and costly mistake among device startups is treating FDA submission as a documentation exercise disconnected from the underlying quality system. Under QMSR, the expectation is that your QMS is operational -- not theoretical -- at the time of submission. Here is what FDA will expect to see upon submission and during any subsequent inspection:

• A Compliant QMS Framework: Your quality manual, SOPs, and work instructions must reflect QMSR/ISO 13485:2016 requirements. If you are using an off-the-shelf QMS template purchased three years ago, it likely reflects the old QSR structure and needs to be updated.
• A Complete Design History File: Every design input, output, review, verification, validation, and change record must be traceable and complete. For 510(k) submissions, FDA reviewers will reference your design controls during Substantial Equivalence review. For PMAs, the DHF is subject to direct inspection.
• Risk Management Records Per ISO 14971:2019: QMSR and FDA guidance documents -- including the 2023 FDA Guidance on Benefit-Risk Factors -- expect risk management to be integrated throughout your design process, not appended at the end. Your risk management file should reference ISO 14971:2019 and document residual risk acceptability decisions.
• Operational CAPA and Complaint Procedures: Documented procedures alone are insufficient. FDA expects evidence that your CAPA system has been exercised. Even startups with limited commercial history should document internal NCRs and corrective actions from design verification and validation activities.
• Supplier Qualification Records: Approved Supplier Lists (ASLs), supplier audits or questionnaires, and incoming inspection criteria must be documented and current before submission.

The Bottom Line for Startups

QMSR harmonization is genuinely good news for companies already working toward ISO 13485 certification -- it reduces duplicative compliance work. But harmonization does not mean identical. The U.S.-specific provisions, MDR integration requirements, and FDA's inspection-ready expectations mean that an ISO 13485 certificate alone does not guarantee QMSR compliance, and it certainly does not guarantee a smooth 510(k) or PMA review.

Startups that treat their QMS as a checkbox rather than a living system consistently run into preventable delays -- FDA Additional Information requests, refuse-to-accept decisions, and post-clearance 483 observations that could have been avoided with proper preparation.

Ready to Get Your Quality System Submission-Ready?

At ADB Consulting and CRO Inc., Andre Butler and the team work directly with device startups and growth-stage companies to build QMSR-compliant quality systems, prepare submission-ready DHFs, and navigate FDA review with confidence. Whether you are six months from your first 510(k) or just beginning your regulatory roadmap, we can help you move faster and avoid the mistakes that derail timelines.

Book your free discovery call today at adbccro.com and let us assess exactly where your quality system stands before you submit.